Who is responsible
Bohzo Ltd (company number 15031604) is the data controller. Contact: order@gsmmodems.co.uk.
What we collect and why
- Orders: name, email, phone, organisation, registration number, delivery and billing addresses, intended-use information and declaration, payment reference. Used to fulfil the order, provide support and comply with the Crime and Policing Act 2026 record-keeping duty. Lawful bases: contract, legal obligation.
- Payment: card details are collected and processed by Stripe Payments UK Ltd, not by us. Stripe's privacy policy applies to that processing. We receive the payment status, last four digits and billing address.
- Enquiries and support: the details you give in a form or email, used to reply. Lawful basis: legitimate interests.
- Restock alerts: your email address, used to send one notification when the product returns to stock. Lawful basis: consent; withdraw by replying to the email.
- Security logs: IP address and timestamps for form submissions, checkout and rate limiting. Lawful basis: legitimate interests (fraud and abuse prevention).
Buyer verification data
Information collected for the supply record (organisation, registration number, addresses, intended use, declaration, verification steps) is retained for six years from the date of supply and disclosed only to police or other authorities where the law requires, or where necessary to establish or defend legal claims. Company numbers are checked against the public Companies House register. This data is not used for marketing.
Who we share data with
Stripe (payment), our courier (name, address, phone for delivery), our hosting provider (Namecheap, servers in the UK/EU), and Google if analytics is enabled and you consent. We do not sell personal data.
Retention
Order and supply records: six years. Enquiries: two years. Restock alerts: until sent or withdrawn. Security logs: 90 days.
Your rights
You may ask for access to, correction or erasure of your data, restriction or objection to processing, and portability, subject to the legal retention duties above. Email us to exercise them. You may complain to the Information Commissioner's Office (ico.org.uk).
Cookies
See the cookie policy.